News for hackers. Stuff that matters.
Re:Compromised PyTorch-nightly dependency chain December 30t... by theteapot on Sunday January 01, 2023 @02:21AM (#34204355)
I think blame is shared between pip being ultra vulnerable to foot guns like this and whoever put together the PyTorch nightly install not seeing the dep confusion issue from a mile away.

There are no comments on this comment yet.